$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft File: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft (raw, json) Hash identifier: Q4CWqQCMM9EY2Upw//CceC+McwOuEmnDyGBVNCseOqE= Subject key identifier: 0D:A6:C7:4C:76:E6:B0:DB:2A:A2:C5:B5:E7:56:7C:66:AD:CF:B9:41 Authority key identifier: 80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24 Certificate issuer: /CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724 Certificate serial: 366364F1E2982EF883CE5A1B08250772F2708607 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft Manifest number: BE Signing time: Mon 21 Sep 2026 23:25:47 +0000 Manifest this update: Mon 21 Sep 2026 23:20:47 +0000 Manifest next update: Tue 22 Sep 2026 23:25:47 +0000 Files and hashes: 1: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: 5qu3egPdBZlEVTvgirw7pWXgCRudPnC+xEwHD5lFYU8=) 2: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl (hash: WprIGqGXlHyneWnfuYb7KfLS9MEz7B4wB9xrfnHnvKc=) 3: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: PF2pFQ8Y4MjWEElnBJwyA+RuYK7yYkD7ChXjYqS9lpw=) 4: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 4a9og07u0srQecoyb+IpBZCUaRdvfCWkjUR0wkeGFvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:63:64:f1:e2:98:2e:f8:83:ce:5a:1b:08:25:07:72:f2:70:86:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724 Validity Not Before: Sep 21 23:20:47 2026 GMT Not After : Sep 22 23:25:47 2026 GMT Subject: CN=0DA6C74C76E6B0DB2AA2C5B5E7567C66ADCFB941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b3:ed:d0:8d:b4:e0:f8:17:ad:50:81:85:44: 5d:1c:66:91:b1:93:6c:cf:e3:5d:59:e7:b6:56:f2: e7:c9:9e:2f:68:47:36:d8:c4:26:04:13:b3:60:b8: 20:e8:69:6b:22:08:88:55:fe:4a:0b:e6:96:02:70: 44:68:b5:4f:2e:e8:58:d9:ca:15:aa:f9:41:29:b1: fd:0e:3b:9f:b4:82:52:0f:05:57:5f:f6:a3:6a:87: 81:79:24:67:a4:b1:bd:37:53:c1:bc:d6:29:06:1b: 93:19:89:12:91:6d:83:37:39:f4:62:78:9e:3c:51: 0a:77:5e:7f:cf:35:72:e7:8a:a1:4a:09:a6:ff:86: c2:77:1b:4f:af:d9:a2:82:02:f8:c8:c3:96:3a:3b: 5d:af:a1:dc:41:64:a8:40:eb:0c:ed:ee:0e:de:82: 73:4e:03:2f:53:1e:df:b5:55:ee:78:b8:a1:34:d3: eb:85:35:f2:61:50:f5:e5:28:b4:e3:74:3e:b9:fd: 84:c5:89:3d:7e:73:64:6a:31:f4:35:67:30:84:31: a5:57:a1:f2:75:28:28:36:67:c2:d4:ff:78:9c:43: 8b:a4:55:ef:23:50:2f:fd:a9:21:c2:2f:f0:71:64: 94:24:16:0a:5e:d3:2f:9a:bd:02:8e:a5:4a:b7:1f: 01:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A6:C7:4C:76:E6:B0:DB:2A:A2:C5:B5:E7:56:7C:66:AD:CF:B9:41 X509v3 Authority Key Identifier: keyid:80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:85:50:a5:65:34:3a:a5:f9:da:0c:41:d0:c5:63:d3:58:97: c7:1a:f4:b6:5b:75:ba:85:d5:ce:74:d0:5d:0e:77:a0:75:b6: 3f:13:52:a9:c6:16:9a:d2:42:dc:b9:76:9a:b9:54:90:60:4c: 17:fd:01:1a:a1:bd:66:ba:97:ba:83:85:b9:8d:49:c3:93:1a: 25:3c:cc:3c:0f:66:ce:9a:e1:85:e0:bb:6e:a1:f3:e7:b1:dc: 98:de:65:54:e3:f6:cc:92:7f:17:70:1b:77:92:3e:bb:55:e6: ce:be:e4:3a:8c:13:18:3c:1d:28:85:17:a1:0d:2e:66:1c:5f: 36:db:34:1b:73:4c:34:96:71:03:71:9f:89:29:96:80:ed:0f: c5:db:40:d2:f8:9e:16:ef:02:19:1c:26:2e:9c:01:4c:61:84: 6c:1b:b8:80:5b:87:9d:e2:60:c9:c8:9b:a4:ac:d0:97:5a:ee: 3a:9b:ae:90:28:4d:c8:3c:9a:75:52:32:c6:82:64:83:e6:8c: 2d:eb:f4:b6:c0:62:47:04:4a:be:fd:5f:75:ef:49:ea:e3:2a: ab:1f:6b:50:bd:f8:4a:a0:8a:89:c0:cf:07:e1:2e:f4:e0:6f: da:d5:51:70:d0:b4:ad:51:61:93:22:df:8e:bf:f4:2a:b5:b3: 77:c6:2f:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNmNk8eKYLviDzlobCCUHcvJwhgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAxRDFCNEVFNkJCNjlEM0Y3REEyREE5REZCREFFRkIy OTc4MzcyNDAeFw0yNjA5MjEyMzIwNDdaFw0yNjA5MjIyMzI1NDdaMDMxMTAvBgNV BAMTKDBEQTZDNzRDNzZFNkIwREIyQUEyQzVCNUU3NTY3QzY2QURDRkI5NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDms+3QjbTg+BetUIGFRF0cZpGx k2zP411Z57ZW8ufJni9oRzbYxCYEE7NguCDoaWsiCIhV/koL5pYCcERotU8u6FjZ yhWq+UEpsf0OO5+0glIPBVdf9qNqh4F5JGeksb03U8G81ikGG5MZiRKRbYM3OfRi eJ48UQp3Xn/PNXLniqFKCab/hsJ3G0+v2aKCAvjIw5Y6O12vodxBZKhA6wzt7g7e gnNOAy9THt+1Ve54uKE00+uFNfJhUPXlKLTjdD65/YTFiT1+c2RqMfQ1ZzCEMaVX ofJ1KCg2Z8LU/3icQ4ukVe8jUC/9qSHCL/BxZJQkFgpe0y+avQKOpUq3HwFvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDabHTHbmsNsqosW151Z8Zq3PuUEwHwYDVR0j BBgwFoAUgB0bTua7adP32i2p372u+yl4NyQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjODAxYTAtNzkxMi00YjAxLWEyODEtODgwMjQ2MjRhMmQ0LzAvODAxRDFCNEVF NkJCNjlEM0Y3REEyREE5REZCREFFRkIyOTc4MzcyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDFEMUI0RUU2QkI2OUQzRjdEQTJEQTlERkJEQUVGQjI5Nzgz NzI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvODAxRDFCNEVFNkJCNjlEM0Y3REEyREE5REZCREFF RkIyOTc4MzcyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKiFUKVlNDql+doMQdDFY9NYl8ca9LZbdbqF 1c500F0Od6B1tj8TUqnGFprSQty5dpq5VJBgTBf9ARqhvWa6l7qDhbmNScOTGiU8 zDwPZs6a4YXgu26h8+ex3JjeZVTj9sySfxdwG3eSPrtV5s6+5DqMExg8HSiFF6EN LmYcXzbbNBtzTDSWcQNxn4kploDtD8XbQNL4nhbvAhkcJi6cAUxhhGwbuIBbh53i YMnIm6Ss0Jda7jqbrpAoTcg8mnVSMsaCZIPmjC3r9LbAYkcESr79X3XvSerjKqsf a1C9+EqgionAzwfhLvTgb9rVUXDQtK1RYZMi346/9Cq1s3fGL6w= -----END CERTIFICATE-----Generated at Tue Sep 22 15:56:52 2026 by rpki-client